Deskripsi CVE

KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-59	Improper Link Resolution Before File Access The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	4.3		AV:N/AC:M/Au:N/C:N/I:P/A:N	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Kde>>Konqueror >> Version 3.5.7

Referensi

http://www.redhat.com/support/errata/RHSA-2007-0909.html
Tags : vendor-advisory, x_refsource_REDHAT

http://securityreason.com/securityalert/2982
Tags : third-party-advisory, x_refsource_SREASON

http://secunia.com/advisories/27271
Tags : third-party-advisory, x_refsource_SECUNIA

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00085.html
Tags : vendor-advisory, x_refsource_FEDORA

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00022.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.securityfocus.com/archive/1/475731/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.redhat.com/support/errata/RHSA-2007-0905.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.ubuntu.com/usn/usn-502-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.securityfocus.com/archive/1/475730/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

https://exchange.xforce.ibmcloud.com/vulnerabilities/35828
Tags : vdb-entry, x_refsource_XF

http://www.vupen.com/english/advisories/2007/2807
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/27106
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/27108
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/26351
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/25219
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/26690
Tags : third-party-advisory, x_refsource_SECUNIA

http://securitytracker.com/id?1018579
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/27090
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/27089
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/26612
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/27096
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/26720
Tags : third-party-advisory, x_refsource_SECUNIA

https://issues.rpath.com/browse/RPL-1615
Tags : x_refsource_CONFIRM

http://www.mandriva.com/security/advisories?name=MDKSA-2007:176
Tags : vendor-advisory, x_refsource_MANDRIVA

http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065101.html
Tags : mailing-list, x_refsource_FULLDISC

http://www.kde.org/info/security/advisory-20070816-1.txt
Tags : x_refsource_CONFIRM

http://www.securityfocus.com/archive/1/475763/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.securityfocus.com/archive/1/475689/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9879
Tags : vdb-entry, signature, x_refsource_OVAL

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	3.93%	–	–
2022-04-03	–	–	3.93%	–	–
2022-04-17	–	–	3.93%	–	–
2022-11-13	–	–	3.93%	–	–
2022-11-20	–	–	3.93%	–	–
2022-12-11	–	–	3.93%	–	–
2023-01-01	–	–	3.93%	–	–
2023-02-05	–	–	3.93%	–	–
2023-03-12	–	–	–	0.83%	–
2023-04-23	–	–	–	0.83%	–
2023-05-14	–	–	–	0.83%	–
2023-05-21	–	–	–	0.83%	–
2023-08-20	–	–	–	0.89%	–
2023-12-03	–	–	–	0.94%	–
2024-01-14	–	–	–	1.01%	–
2024-02-11	–	–	–	1.01%	–
2024-03-31	–	–	–	1.11%	–
2024-06-02	–	–	–	1.1%	–
2024-06-16	–	–	–	1.2%	–
2024-07-21	–	–	–	1.55%	–
2024-10-06	–	–	–	1.14%	–
2025-01-05	–	–	–	1.61%	–
2025-01-19	–	–	–	1.61%	–
2025-03-18	–	–	–	–	0.8%
2025-04-15	–	–	–	–	0.8%
2025-10-23	–	–	–	–	0.85%
2025-11-18	–	–	–	–	0.85%
2025-11-21	–	–	–	–	0.85%
2026-01-01	–	–	–	–	0.85%
2026-01-04	–	–	–	–	0.85%
2026-02-22	–	–	–	–	0.85%
2026-03-29	–	–	–	–	0.89%
2026-04-12	–	–	–	–	0.89%
2026-06-14	–	–	–	–	1.76%

Tanggal	Persentil
2022-02-06	68%
2022-04-03	84%
2022-04-17	85%
2022-11-13	86%
2022-11-20	85%
2022-12-11	86%
2023-01-01	85%
2023-02-05	86%
2023-03-12	79%
2023-04-23	8%
2023-05-14	79%
2023-05-21	8%
2023-08-20	81%
2023-12-03	81%
2024-01-14	82%
2024-02-11	83%
2024-03-31	84%
2024-06-02	84%
2024-06-16	85%
2024-07-21	87%
2024-10-06	85%
2025-01-05	87%
2025-01-19	87%
2025-03-18	72%
2025-04-15	73%
2025-10-23	74%
2025-11-18	73%
2025-11-21	74%
2026-01-01	75%
2026-01-04	74%
2026-02-22	75%
2026-03-29	75%
2026-04-12	76%
2026-06-14	83%

CVE-2007-4224 : Detail

CVE-2007-4224